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Foreword 


As a part of the Reserve Bank of India’s customer awareness initiatives, in July 
2021 this office had published a booklet ‘Be(A)ware’ on the modus operandi of 
financial fraudsters. Encouraged by the positive response received from members 
of the public as well as different institutions, we take forward the idea of financial 
education, to be more accessible to those who have just begun their journey into 
digital financial world and are not so well-versed with the nuances of online financial 
transactions. This includes people from different ages and education levels such 
as school children, young adults, semi-literates and senior citizens, irrespective of 


whether they live in urban, rural or semi urban areas. 


Continuing the “Be(A)warte’ series, this booklet “Raju and the Forty Thieves’ is 
a manifestation of our efforts. The booklet is an easily understandable pictorial 
depiction of incidents happening around us and helps us to learn how to keep 


hard-earned money and ourselves safe from fraudsters. 


As the name suggests, “Raju and the Forty Thieves’ contains forty such stories 
providing glimpses of fraudulent events being reported to us and provides simple 
tips about DOs and DON'Ts. Raju is a typical gullible citizen, and, in these 
stories, he appears in different characters, some time as a senior citizen, some time 
as a farmer, sometimes as a happy-go-lucky guy, etc., although with same curly 


hair always to identify with different walks of life. 


Let us make ourselves aware of such modus operandi used by fraudsters and educate 
those around us to be aware of such financial frauds. ‘The tireless efforts put by the 
team of RBI Ombudsman, Mumbai-II, Maharashtra and Goa, to spread financial 
literacy by preparing such booklets during covid period, is gratefully acknowledged, 


The readers are requested to share their feedback and suggestions, if any, to 


bomumbai2@rbi.org.in. 


Be Aware and Beware! 
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One day, Raju received message 
on his phone: ‘Dear customer, if your KYC 
details are not updated within two days, your 
account will be blocked. Use the below link to 


update the details at http://updateKYC.X’YZbank.com’ 


(Raju: “Oh! All my money will be blocked: 
I need to update my KYC details." 


Do's: 


1. FRAUD THROUGH PHISHING LINKS 


Raju clicked on the link, but the link to 
update KYC details did not work. Soon, he 
gets a call. 


| Fraudster: "Hello Sir, I am 
| calling from XYZ bank. Are 
} you facing any issues in 

| updating your KYC details?" 


~ |Raju: "Yes, the link 
is not working.” 


be high; I will update the details 
manually. Please share your 
username, password and OTP." 


|“ Always cross-check the KYC status with your home branch or through your relationship manager when 
you receive calls, links or SMS from unknown sources requesting you to update KYC, 
|v Report the incident to the nearest Cyber Crime Police Station and National Cyber Crime Reporting 


Portal at https://cybercrime.gov.in 
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Raju: “Okay, I have texted | | Fraudster: “Your KYC | 
you all the details." | details are updated 
3 Dg | successfully,” 


ae 


Raju: 
“Thank you." 


After some time, Raju received SMS alerts on his phone stating that 
Rs 50,000 was debited from his account. 


Raju immediately called the other person, but he didn't answer the calls. Raju realized | 
that the person was a fraudster and he should not have shared any personal details 
with him. 


Don'ts: 
x Don't click on unknown/unsolicited links received on the phone/email without verifying it. 


x Don't share your confidential details with strangers. 
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2. VISHING CALLS 


One day, Raju received a call. 


Fraudster: “Hello Sir, I am 


calling from XYZ Bank." 


Raju: “Hi, what 
is the matter?" 


activated, and you need to pay 
Rs18000 as a premium.” 


Raju: "Nol Idon't have any | / Dal 
insurance with X¥Z bank." A 


| Fraudster: “Sir, it got activated | 
| asd promotional offer atavery | )) Fraudster: “Sir, I am calling you directly from the X¥Z Bank 
| low fee. But if you don't need it, ; ————__—-__—__—-- customer care. I have all your details like Name, Address, 
T will deactivate it.” Raju: “I don't understand how you| || card details, DOB, Company Name and Designation 
activated the policy without my | | EE ——E =s 
consent, and why should Y 
I trust you?" 
































Raju: “Okay, so tell me | 
| howto deactivate 
the policy?” + = 


~ Always cross-check with your relationship manager or bank branch about any issue before trusting anyone. 
wv OTP is like a key to your safe wealth, so always keep it away from fraudsters. 


“ Report the incident to the nearest Cyber Crime Police Station and National Cyber Crime Reporting Portal 
at https://cybercrime.gov.in 
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Fraudster: “I will deactivate it online from here. Please share the OTP 
which you will receive now." 


7 Sar te — 
“AGN E ite 


a 


Raju: “Yes, I got the 4 
; OTP. It is 859623." — 


Fpetesee ics ierat A few minutes later, Raju received a message alert, 
! the policy, Sir.” : 'Rs-15000/- is debited from your account.’ 


1y' 


ay 
— 


Fad 
rm 
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Raju immediately visited the nearby XYZ branch and enquired about the transaction. 
Raju realized his mistake: the call was from a fraudster; 
he should not have believed a stranger. 


Don'ts: 
x Don't trust unknown callers claiming to be speaking on behalf of banks asking for confidential 
information / details. Banks don't seek such details over phone. 


x Never trust strangers in the digital world easily, and be cautious while answering calls from 
unknown numbers. 
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Raju wanted to dispose of sofa set. He posted the Immediately after posting the advertisement, there was an 
marketplace for second-hand goods. for the sofa set. Raju felt very happy after getting an offer. 


Fraudster: “I will pay online before | 
picking up the furniture." 


| Fraudster: "Please share your | Raju: "My account | 
account pumbers: Ra number is 123xxx67." 


: Froudster: *E will first send 
‘Rs 10/- before making the final | 
payment to sig the account." 


The fraudster sent Rs10/- to Raju's account and asked for 
confirmation for the final payment. 


Raju: “Okay, I got it." | 


Do's: 
y Always remember, UPI PIN is required only to make a payment and is not required to receive any payment. 
Always verify the mobile number in the UPI application before initiating a payment. 


w Report the incident to the nearest Cyber Crime Police Station and National Cyber Crime Reporting Portal at 
https: //cybercrime,gov.in 
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Then the fraudster sent a UPI request for receiving a payment of 
Rs 14,990/- instead of paying Raju. 


canton 
SCRATCH | 


| | 


Raju: “It is asking for my PIN; 
why should I enter the pin?" 


Raju entered the pin immediately, 


| Fraudster: “As per bank rul | . 
: “As per bank rules, . 
the PIN needs to be entered and his account was debited for Rs14,990/ 


| for high-value transactions." [jp 


Realizing that he was cheated, Raju quickly approaches the bank branch and 
registered a complaint on the same day. 


Don'ts: 
| X Don't share OTP or confidential account details with strangers. 
X Don't enter the UPI PIN to receive an amount from another person. 
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4. CREDIT CARD ANNUAL FEE 
WAIVER- FAKE OFFER 


One day, Raju received a call from an unknown number, 


Fraudster: “Good morning, Mr Rajul 
T am Rohit Kumar from your Bank 
customer care. We are happy to 
inform you that your credit card 
annual fee will be waived for 
this year as you are one of 
our most valuable customers." 


Raju: "Oh! 
That's great news.” 


Fraudster: “Mr Raju, Please 
confirm a few details before 
I can proceed further. Your 
card number is 42781234 XXXX, 
and your full name is Raju 
Deshpande, right?" 


The fraudster had already gathered Raju's card details fram 
illegitimate sources. 


Raju: “Yes, these. | 


Fraudster: “Mr Raju, now you 
will receive an OTP. Please 
share it with us so that we 

can waive the fee at our end." { 


v Be cautious while responding to calls from unknown numbers claiming to be from your bank. 

¥ Report to your Homebranch immediately on realizing the fraud. 

~ Block your card to prevent further financial loss. 

“ Report the incident to the nearest Cyber Crime Police Station and National Cyber Crime Reporting Portal at 
_https://cybercrime.gov.in 
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Raju reasoned that since the caller already knew his card details, the call must be 
genuine. He shared the OTP with the fraudster immediately. 


Fraudster: "Thank you, Mr Raju. Your: 
jannual fee is waived off. Have a great day!" 


The call was disconnected. Soon, Raju -— er oes. 
received an SMS stating that R12 000 wide Raju immediately called the fraudster, but his phone was 


debited from his credit card account, switched off. 


THE Num BER Yoy ARE 
Tetgne Te cAce 
Ls sii T CHED-OFF 


_— fuease CALL LATEF. 


Raju realized the person was a fraudster, and he should not have shared 
the OTP with him. 


Don'ts: 
Don't share your OTP with anyone. Fraudsters might be able to collect your account details, 
but transactions can only happen if you share the confidential OTP sent to your phone. 
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5. ATM CARD SKIMMING FRAUD 


Raju receives his monthly salary in his account. He visits an ATM After a few hours, Raju gets SMS alerts for a few 
ROMAN KEEN Va ATE YA es TW Ry eRe iee ed more debit transactions. (Rs 15,000/- is debited from 
: your account. Rs 12000/- is debited from your account.) 


Raju: “This SMS is about a 
transaction with my ATM card. But 
I have used it only once today." 


Raju withdraws the money,andhegetsanSMSalert for 
his transaction, 


Daughter: "What was your 
last transaction, papa?" 


Raju: “I had withdrawn 
only Rs10000 today.” 


Daughter: “Let me first block your ATM card. 
We can easily block it through your Mobile 
Banking App. 





Daughter: We will also request 
your bank to block your bank 
account. 


Daughter:Also, did you share any 
of your bank or ATM card details 
with anyone? Or did you share 
your OTP?" 


Do's: 

w Before initiating any transaction in the ATM machines, ensure that skimming devices are not present. Skimming 
devices are hidden by fraudsters by Byerlapeng sien with the card insertion slot. 

# Report the fraud to the bank within 3 days of t 
to verify all transactions. 

w Report the incident to the nearest Cyber Crime Police Station and National Cyber Crime Reporting Portal at 
(https://cybercrime.gov.in) 


e card cloning incident.Check your transaction history frequently 
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Raju: "No, Beta! I did not share 
any details with anyone." 


| Daughter: “Look at this, Papal 
There is a skimming device near 
the card insert slot." 


Raju: “What is this 
skimming device? And 
how do you recognize | 
that?" | 


Daughter: “Skimming device is a card reader 
that collects cord numbers which are 
then replicated into counterfeit cards 
used for illegal ATM cash withdrawals.” 


* Don't give your ATM card to anyone on the ATM premises to transact on your behalf. This kind of social 
engineering is being used to target senior citizens/semi-educated persons who have difficulty 
operating ATMs, 
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6. FRAUD USING SCREEN SHARING 
APP/REMOTE ACCESS 


Fraudster: "Hello Sir! Good Morning. 
Iam calling from ABC Gaming 
Corporation. We are delighted to 
offer you a cash reward for playing 
an online game." 


At first, Raju doubted that the person might be a fraudster and remained silent. 


Fraudster: "Sir, I am an employee of the company which makes 
online games, and this is a beta version of the new game we 
have developed. We need feedback from users before 
launching the game to the public. So, we are inviting 
gamers to download this app, play games and give us feedback 
for improvement. We will be giving you Rs 10,000/- 

for this,” 


Raju: “Oh Wowl T 
will get a cash \ 
reward for playing || || Fraudster: "Sir, you willseea: — “*iny 
the game, From code for logging into the app. * \ 
— see doTinstall |||: Please share it with us." 
preset eee eee eee nee i ad hai 
|: Fraudster: “Sir, I have : ideal calles 
shared the link to 
download the app. You aga NTRS SEES 
can log in with the Ra ju: What? Code? Is 
| User Id-XXXXX@ ABC.com : this like an OTP for 


| /and password- MNOPQRS.": 


financial transactions?” 


Do's: 

Verify the authenticity of the offer on the official website of the entity concerned. 

Install antivirus/spam blocking software on your mobile phone. 

Report the incident to the nearest Cyber Crime Police Station and National Cyber Crime Reporting Portal 
at https://cybercrime.gov.in | 
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Fraudster successfully installed the screen-sharing app in | [ Raju thinking that it was just a matter of Rs 10/- transferred 
Raju's mobile and gained access ta his phone. He could the amount through Net Banking. Soon he received debit 
read the messages on Raju's mobile and track his keypad. messages of Rs 35000, Rs 20000 and Rs 40000. 
Fraudster: “Sir! We would be 
giving you 
Rs 10000 for participation 
but before | i = 
that please pay Rs 10 to ne nak Raju: "Oh my God! How 
the account i aon did this happen! I 


Once the screen-sharing application was installed, the fraudster had access 
to the net banking password entered by Raju for making the payment (of Rs 10.) 


Don'ts: 
* Don't download any applications over links sent through SMS, Email or instant messaging applications. 
*% Don't download screen-sharing applications shared by any unknown persons. 

Screen sharing codes generated by these apps should not be shared with unknown persons. 
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7. SIM SWAP/ SIM CLONING 


Fraudster: “Hello Sir, 

Tam calling from ABC telecom company. 
We are offering you a SIM card upgrade 
for better internet connectivity 
and more data." 


Fraudster: “You must share 
with us basic details 
like your Aadhaar Card number 
and unique 20-digit SIM card 
number. Thereafter, you will 


get a text. Reply ‘I’ 


J paju: “What should T| to activate the offer." ve 


do to avail 
this benefit?” 


a 
= 
= 
ee 


Do's! 
v Verify the status of the SIM card with your Telecom Service Provider when in doubt 
instead of believing unknown callers. 


¥v Report the incident to the nearest Cyber Crime Police Station and National Cyber Crime 
Reporting Portal at https://cybercrime.gov.in 
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Raju shares the details with the caller, 


Raju: "What has happened 
to my mobile! There is no 
network, and I am not able 
to make calls, 
send messages, etc." 





Fraudster uses the new SIM to retrieve the username After a few minutes, when Raju received emails showing cash debits from his bank 

for the banking application by using options like forgot) account, he checked his bank account balance. He noticed that some unauthorized 
username, reset password etc. and transfer all the | debits were made from his account for which no SMSs were received on his registered 

money to his account. mobile number as the SIM was compromised to transfer funds, shop online, ete. 





Don'ts: 
x Don't share confidential details like Aadhaar number and SIM number with unknown callers. 
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8. FRAUDS BY COMPROMISING CREDENTIALS 
THROUGH SEARCH ENGINES 


Raju is fond of watching cricket, and he was very excited about the upcoming cricket match, But as soon as he opened the 
Sports App, he realised that his subscription had expired, 


“Raju thinks: "What is the big deall 
The Internet has all the solutions." | 


Thinking this, he searched for a way to recharge the Sports App on — ; 
the internet. After searching for a while, he found a phone number Raju: "Hello! T want to recharge my 
for the same, Raju dialled the number immediately. _ Sports account. 


il 


v Always obtain the contact details/customer service number, etc. from the official website 
of the service provider only. : 

“ Report the incident to the nearest Cyber Crime Police Station and National Cyber Crime 
Reporting Portal at https://cybercrime.gov.in 
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Fraudster: “You will get the payment link 
on your phone now. Please click and make | 
the payment." 


| Raju ~ "Yes, I got the 
payment link. I will 
pay the amount now." 


Raju received an SMS stating that Rs 40,000 was || Instead of paying Rs 1000 to Sports App, Raju ended up transferring 
debited from his account. | Rs 40000 to the fraudster. 


x Don't contact random phone numbers obtained from web search engines, especially 
for doing financial translation. 
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5 et 
"i ag BP, 


Raju registered his old car on an online website to sell it, 


Fraudster: “Hi, I saw your car 
advertisement on the platform. 


| Raju: “That's great! I guess you want | 
Raju “Glad you liked it. j it check the sil papi buying it” | 
My car is in excellent _ = 
condition, IT am buying Froudster: "Sure, we want to Li 
a new car, so Lam inspect the cor, but before that, 
selling this one. I T will send you a token amount 


| won't negotiate the | as I don't want to lose the offer.” 

|; about the price. Taman _ =» 
| army personnel, andIam | 

|| about to retire ina month. | | 

| My son wants to purchase a; 

| cor,and he is insisting — ; 

|; on buying this one only.” 


Do's: 

Educate yourself about QR codes before using them, 
Report the transaction immediately to your bank. 
Report the incident to the nearest Cyber Crime Police Station and National Cyber Crime 
Reporting Portal at https://cybercrime.gov.in 
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Raju: “Okay, I will send you my account details. Please send a token cl abl 1, a erene Ereueerer ayer 
amount of Rs, 10,000/- to seal the deal. You can send the amount by pe 
‘Fraudster: “Hello, I called you earlier. | 
| Lhave been trying to transfer the | 
; amount for the last 10 minutes, but | 
i Tm unable to do so. Therefore, Iwill * 
be sending youa QR code through =; 
‘email. Please scan the QR code so that |! 
I can send you the amount." fs 


| Fraudster: 
"I got your details. a : - ec 
Iwilltransfer the | , | fecijae “coke, fa ircbitern, | “Ohiay a problem, Ca 


T got the QR code; =.—— 


| I will scan it. | 


I have scanned the QR code, 
but it is asking for my UPI 
PIN to proceed further.” 


Fraudster: “That is correct: 
you must enter your PIN 
to receive the money.” 


Raju believed him and entered his UPI PIN. Subsequently, his account got debited with Rs 70,000. Raju received the SMS alert of the debit. 
He panicked, so he tried calling the fraudster, but his phone was switched off by then. 


Don ts: 

x Don't enter your UPI PIN to receive money from another person. UPI PIN is required only 
for sending a payment, not for receiving. 

x Dont scan QR codes to receive any payment. QR code needs to be scanned for sending a 
payment, not for receiving Money. 
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10. IMPERSONATION THROUGH SOCIAL MEDIA 


Krishna: “Papa, I bought this for you with my first salary. 
A brand-new smartphone," 


Raju: “Thank you, beta. 
But I really don't know how 
to use it." 


Krishna: "I will teach you to 
use internet applications." 


Soon Raju got accustomed to using social media: he started posting | One day, Raju's friend, Ramu messaged him on social media 
pictures, liking posts, sending friend requests and messages. requesting Rs 10,000 for a medical emergency. Raju immediately 
[oscaace made the payment to Ramu using the shared account details. 
7 wer BiRMouy 


. | ois i F = i 

G P = d — i 
x |) \Pee 

a iia 178 3) an 7 


Do's: 

¥ Verify by calling/meeting the real person before making a payment. 

v Always check the account details before making any payment. 

v Report the incident to the nearest Cyber Crime Police Station and National Cyber Crime 
Reporting Portal at https://cybercrime.gov.in 
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After a few days, Ramu met Raju in person. 


Ramu: “Hi Raju. It's been 
a long time.” 
Raju: “Are you okay now? What 
happened to you? What was 


a ial 
Ia 


i 











a | ~ 
we J| Ramu: “['m perfectly 
=~ fine: nothing has 


happened tome." | 


Raju: “Upon your request on social media Ramu: "But I never asked 
for the medical emergency, I had for help nor received 
transferred Rs 10000 to you." any money from you.” 


Raju: “Thinking the 
request on social media 
was genuine, I have 
transferred Rs 10000 | 
to a fraudster. 
(Oh, I am duped!)" 


Don ts: 

x Don't keep your personal information like mobile number, email id and friend list open to 
the public. 

* Don't accept friend requests/ follow requests from people you have never met in person. 
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11. JUICE JACKING — STEALING OF DATA 
THROUGH CHARGING CABLE 


Raju had to leave due to a medical emergency. 
He realizes that his phone battery is low. 


* Raju: “Oh no! My battery got drained, 
and I don't have a charger.” 


| A fraudster installs a charging cable with a virus and leaves it at the 
jenarghig paint ina public place. Raju notices the charging point with the 
charging cable and asks the fraudster if he can use it. 


Raju: “Hil Can T use 
Yor San pd .— 


ui "| Fraudster: "Why not!| 
Please use it.” 


¥ Install anti-virus software on your mobile phone to protect it from unauthorized access. 
~“ Report the incident to the nearest Cyber Crime Police Station and National Cyber Crime 
Reporting Portal at https://cybercrime.gov.in 
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While charging, the charging cable injects the virus into 
Raju's mobile. 


During the next few days, the | One day, Raju receives SMSs/emails indicating 
entered by Raju on his mobile and got hold of vital bank details like unauthorized debits in his savings account 
username, password etc. | - 








Don ts: 
x Don't use charging adapters/cables from strangers. 
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12. LOTTERY FRAUD 


| Fraudster: "Hi... I'm Pankaj calling 
‘from ABC. Congratulations on winning | 
,’ the ABC jackpot of Rupees 10 Lakh. | 
Y Thave sent you the jackpot details. | 
/.4 You may contact the number 


Excited, Raju called the number in the jackpot message which featured a fake 
audio of a Superstar congratulating him on the prize. 
He contacted the given number. 
Raju: "Hi, this is Raju. 
I was asked to contact you for 


claiming the ABC Jackpot. 
How shall I claim my jackpot?" 





Unaware of this fraudulent activity, Raju paid the amount 
__and called him back. 





Fraudster: "Congrats Raju! You must pay a delivery 
fee of Rs 1000 to be eligible to receive the prize. 
T have shored our account details on your Message App 


| | Raju: “Hi, T have paid the amount and sent | 
number. Please pay the amount immediately and call me back." 


| you the details. When will I get my prize?” | 


Fraudster: "Excellent Rajul 
We have. only a few more 
steps to complete before you 
get the jackpot of Rupees 
Pe= 10 lakh. You will have to pay & 
a tax fee of Rs 25000 to 


g = claim the prize amount." 





Do's: 

Verify the message received from unknown numbers before trusting them as members of any 
company or management team. 

Always verify lottery offers with official websites of such events. 

Report the incident to the nearest Cyber Crime Police Station and National Cyber Crime Reporting 


Portal at https://cybercrime.gov.in 
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Without thinking twice, Raju makes the payment. 


Raju waits for the jackpot for the next few days but receives 


Raju: “I have made L no further updates... 


the payment." 


' Fraudster: “Thank you, Sir! 
You will receive your prize within -o7J 
two days." 


..Later, he realizes that he was cheated. 


Don'ts: 
x Do not make payments without verification, expecting very high returns. 








13. ONLINE JOB FRAUD 
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Raju had lost his job recently and was very worried. He started looking for jobs on online job portals. He updated his resume on 
various websites, 


One day, he got a call from a fraudster, impersonating a person 
from X¥Z Company. 


| Fraudster: “Am I talking to Mr Raju?" 


! 
Cli | 
I 


ee eee eee 


_ know whom TI am 
talking to?" 


Do's: 
~ Verify the authenticity of the company or recruitment agencies before 
paying any money. Recruitment agencies generally do not charge 
candidates for hiring them. 
~ Report the incident to the nearest Cyber Crime Police Station and 
National Cyber Crime Reporting Portal at https://cybercrime.gov.in 





| Fraudster: “Hi, Raju. I am Rohit from the Human Resource | 
department of X¥Z Company. You are selected for a 


1 
managerial job in our company based on your application.” | 
' 


| Raju: “Wow! Thank you for 
selecting me.” 
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Fraudster: “Nothing, You need to pay a one-time registration fee of 
Rs 5,000 as a security deposit for the office laptop. Since it is a 
work from home job, we will courier you the laptop." 


Fraudster: “Thank you, Sir. We will send the joining letter 
and laptop to your address in 3-4 days.” 
Raju: “I have paid the 
security deposit. 
Please check it." 


Despite waiting for several days, Raju did not receive any laptop. He tried calling on the number, but the number was always switched off. 
He searched the company name online but did not find anything. Raju eventually realized that he was defrauded of his hard-earned money. 


Don'ts: 


> Don't pay anyone under the pretext of a job. A legitimate company will never ask for 


payment from a potential candidate for a job offer. 
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14, FAKE ACCOUNT NUMBER 


[ns RANCE 


Twauiky gooTH 


| Raju: “That is great. | 
| What are the options 


Raju: “Hello, I am planning 
to buy an insurance policy 
for my family.” 


Sales agent: “Sir, you have 
come to the right place. 
! We have started this outlet i 
' in public places especially for | 
launching new insurance 


Sales agent: “Sir, the best 
one for a family is the 
| SURAKSHA plan in which you| 
will get 2 lakh cover for — | 
a premium of RslO000." 


Do's 

¥ Cross-check an organization's credentials on a known database to see if they are genuine, 

¥ Always approach registered offices for availing products. 

~ Funds are transferred solely based on account number. 

/ Fraudsters may give a genuine company name but give their own account number, 
always verify the account number with the company before making a payment. 

¥ Report the incident to the nearest Cyber Crime Police Station and National Cyber 
Crime Reporting Portal at https://cybercrime.gov.in 
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og a ee ee “ee ee ee 


Raju: “Okay. That's great. I will pay you right now. 


a 


| Sales agent: "No Sir. This is a one-time special offer. 
You need to transfer the amount to this account: 
Account Number -12312312312; 
Account Name: ABC Insurance Company. 
Our office agent will deliver the policy 
documents to your home in seven days.” 


Raju: “Okay, I have transferred 
the amount. Thank you." 


The next day Raju noticed that the outlet was "We don't have any such outlet. Also, we have a specific payment 
gone. Even after 10 days, he did not option on our official website. We do not entertain any other 
receive any documents, - 
Raju called the ABC insurance company, 












Don'ts: 


xX Do not pay anybody without verifying the authenticity of the company. 
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15. FRAUD THROUGH EMAIL 


A fraudster sent an email to Raju, impersonating his friend Ramesh, asking for financial help for his medical emergency. 


| Raju pays the amount immediately without verifying the email ID 
or account details 


Raju: "Hey Ramesh, how are you? 
T hope you are fine now." 


Ramesh: “Hello Raju. I am fine. How are you? 
You've called me after a very long time.” 


Do's: 

v Verify with the person concerned before making any payment based 
on the email received. 

¥ Verify the email ID. 

¥ Report the incident to the nearest Cyber Crime Police Station and 
National Cyber Crime Reporting Portal at https://cybercrime.gov.in 
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canto 


SCRATCH | 


Raju: “What? You emailed me yesterday for money, 
and I transferred the money, Don't joke with me!" 


* email to you nor have I got any | 
i money from you" 


Ramesh: "My email is Ramesh.bohra@gmail.com: 
the mail ID Ramesh .bora@gmail.com" someone tricked you by using a similar-looking name. 


(Raju was in shock after knowing this. His act of kindness made him a victim to a fraudster due to his negligence. 
He should have verified the email ID.) 


Don'ts: 
x Dont make payments on receiving requests from random emails or 
similar-looking email ids. 
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anew product, MessageApp, It's a banking facility that provides 24*7 banking services easily 
through your MessageApp. You will also receive a gift voucher when you use it for the first time. 


7 


Please confirm whether 99*****"99 is the mobile number registered with MessageApp. ' | 


— = = Raju opens his MesageApp and sees a welcome message from 
Raju: “Wow! That's amazing. a number with the poster of XYZ Bank as its profile picture and 
Yes. This is my the bank's tagline as its status. 





MessageApp number.” 


Fraudster: “Okay Sir, 
We have already sent 
you a welcome message 
on Message App. Please check,” | 


Fraudster: "Please enter the details of your debit card for verification. 
You do not have to share the details with me but enter it only on the official 
MessageApp number.” 


} Raju: "I have entered it 


— eww wet tt nem en meme eee ees 





Do's: 
Be cautious while responding to calls from unknown numbers seeking 
your account details. 


Report to your home branch immediately on realizing the fraud. 
Block your account to prevent further financial loss. 

Report the incident to the nearest Cyber Crime Police Station 
and National Cyber Crime Reporting Portal at https://cybercrime.gov.in. 
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Fraudster: “Great Sir, Please wait for 2 minutes, 
I will update your details. 
You will receive an OTP for activating the 
MessageApp banking feature. 
Please share the OTP." 


Fraudster: “Your MessageApp banking has been activated, | 
and you will receive your gift within two days." 


Raju notices a debit message of Rs 20000 in his account. He immediately calls back, but the phone is switched off. Raju realizes that he 
has been duped, 


x Don't trust unknown callers offering easy banking services and sending 
texts through Messaging Apps. 
-X% Don't share card details and OTP. 
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17. FRAUDULENT LOANS WITH 
STOLEN DOCUMENTS 


Raju fills up several forms on the internet for availing of a personal loan. 


ONLINE ERS 
Lee 














Do's: 

~ Always monitor the end-use of the documents in the transactions. 

¥ Report the incident to the nearest Cyber Crime Police Station and National Cyber Crime 
Reporting Portal at https://cybercrime.gov.in 
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Raju fills the loan application form with all his details and provides a cancelled cheque to the representative. 


™ ia = 7) fs 


Raju: After a month, Raju receives a letter informing him .. Shocked, Raju calls the bank to inform them that he did not take | 
Rs 10,000/- is due for the loan... | any loan, But the bank shows the lean application form filled by him. 


Don'ts: 
X Never share your confidential details like the Aadhaar number, PAN number, cheque 
book or cheques with unknown persons. 
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18. BETTING SCAM 


Raju searches for JKL betting groups 


Raju was excited for the 
on the internet. 


latest season of JKL cricket. 


The new JKL cricket 
season is here. 

There are many stories 
of easy money through 
betting: 

I must try it. 











Welcome, Mr Raju. 







We are glad you = 
enquired about "T want to place a 
the betting. bet for this 






How may I help you?" JKL season. 








|Fraudster: "First, you need to register on XYZ betting.com 
and as a welcome gift you will receive Rs 5000 
on your first recharge of minimum Rs 5000." 












Do's: 
~ In case scammed by a fake app/website, one should immediately call his/her 
bank to block the card/account/UPI service to prevent further transactions. 


v Report the incident to the nearest Cyber Crime Police Station and National 
Cyber Crime Reporting Portal at https://cybercrime.gov.in 
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Raju installs the flashy app 
and gets convinced that this is a big company 
by merely looking at the home screen 


Send me the link 
+o install the App! 


| Fraudster: “We have not received your 
amount. Kindly ex , | 
Raju: "Yes, I have installed the App 
| just paid Rs 5000 as instructed. 
When will I receive the additional 
credit in my wallet?" 


“It seems little suspicious 
but i will wait till morning " 


However, Raju got duped and never 
heard from the fraudster again. 


Don'ts: 
* One should not make payments on unknown websites. 
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One day, Raju received a call from 
an unknown number. 


| Tam calling from the Local health Centre. "Oh! Okay. But we can do 
We are calling to provide the vaccination 


it through the 
a COWIN App only, right?" 
facility at your home." 


| "Yes Sir, but the home vaccination facility 


; | "No Sir, it is f st. 
is not available on the App. 0 Sir, it is free of co 


[ will verify your address 

and you will get registered 
for the vaccine. | 
Please tell me your Aadhaar 
and PAN card details." 


Do's: 
wv Read the entire SMS to read the purpose of OTP. 
¥ Report the incident to the nearest Cyber Crime Police Station 
and National Cyber Crime Reporting Portal at https://cybercrime.gov.in. 
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"My Aadhar number is 1234455, 


"Thank you, Sir. Please wait. 
and my PAN card Number is adf1234." 


Iam registering your Aadhar and PAN card, 


you will get a registration OTP code. 
Please share that." 


“al 


“Thank you, Sir. You have successfully 
(Raju received an regeteree for the vaccine, 
SMS- your verification code is 1234) cl 


you will get a confirmation soon. 


Please share the code when our health 
officials visit to vaccinate you." 


is 1234." 


The call got disconnected. The fraudster tricked Raju into sharing his PAN number 
ove By mas and OTP for taking a loan of Rs-50,000 
ones Soe Me Ea: sas ses on behalf of Raju. Taking a loan based on Rajus 


PAN number makes Raju liable to pay back the 
loan to X¥Z Company. 


Don'ts: 


| * Dont share your Aadhaar, PAN card details and OTP with strangers. 


PAN card-based OTP is used for various financial services including cash withdrawal from bank 


accounts. Therefore, it is extremely important to protect your confidential details like Aadhar 
and PAN cards from fraudsters. 
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20. COVID TESTING- FAKE ONLINE SITE 


Raju wanted to do the Covid-19 test at home. He searched on the internet for 


diagnostic centres that provide home testing facilities. 
“Welcome to ABC Diagnostics. 
| Please provide your address for sample collection.” 


"Hello, I want to book 
a Covid-19 test." 


“It will cost Rs 1000 plus home | 
collection charge of Rs 100. 
Also, you must pay Rs 550 | 
in advance for pre-booking. | 
T will share the payment link 
for pre-booking with you." 


As it was urgent for Raju to get tested, he agreed | 
to pay the advance amount.He paid the said amount 
using his debit card on the link provided. 


Do's: 
v Always book any kind of test through registered pathology laboratories only. 
¥ Report the incident to the nearest Cyber Crime Police Station and 

National Cyber Crime Reporting Portal at https://cybercrime.gov.in. 
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eecll78725 


Raju got tensed, and he searched 
the helpline number on the 

ABC Diagnostics site but 

couldn't find if. 


Raju eventually 
realized he was 
defrauded. 


* Do not make a payment in advance when you are doubtful. If anybody asks 
for an advance payment, it is a matter of caution 
and one should go ahead with those transactions with requisite precaution. 
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21. FRAUDSTERS IN THE PRETEXT OF 
RECOVERY AGENTS: 





Fraudster: "I am recovery agent from 
XYZ Bank. It is seen that you have 
defaulted repayment of loan dues. I am 
here to officially seize your vehicle." 


vehicle loan availed from XYZ Bank. 
However, Raju lost his job and was 
struggling to repay the loan EMIs. 
One day a fraudster disguised as 
recovery agent of XYZ Bank 
approached Raju at his residence. 


“No No, This is bank's procedure. You 

have around Rs.20000 dues. You will 

have to pay at least Rs.5000/- now or 
IT will have to take the vehicle." 


Raju: "Oh no. Please don't seize my 
| vehicle, I have missed last few EMIs 
jas I had lost my job. I have got a new 
job offer at hand and I promise 
to repay from next month." 


Do's: 

| wf Always ensure identification of Recovery Agents before making any payment / 
commitment. Check whether agent carries a copy of the recovery notice and the 
authorization letter from the bank along with the identity card issued to him by the bank 
or the agency firm. You can also cross verify with the home branch over phone. 

_ wW Report the incidence to the nearest Police Station and your home branch. 
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Fraudster collects money: 


"Okay. I will pay Rs.5000/- 
now and remaining in next few months. | 


“Ok sir. I am doing this as a special 

favour. You can collect the receipt 

and pending dues position directly 
from the bank branch" 


“How come? I have already | 
paid Rs.5000/-few days 
before to your agent" 


Don't's 


After few days another recovery 
agent approaches Raju at his residence: 


“Good evening Sir. I am Ravi, RecoveryAgent 
from XYZ Bank. Please see this recovery 
notice issued by bank stating that you have 
missed your last three EMIs and bank 
may go forward with seizure of vehicle, 
You may either pay directly at the bank or 
hand over to me against receipt.” 


"That | is no! possible sir. Tam 
the authorised agent for XYZ bank in this 
area, Please see my ID Card and the 
authorization letter from the bank for 
recovering dues. Did you see his ID? Do 
you have any proof of skis payment?" 


“Oh Noll 
t trusted him blindly!" | 


% Never make any cash payments to bank/ recovery agents without proper 


acknowledgement of receipt. 
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22. SOCIAL WELFARE SCHEME FRAUD 


One day, Raju got a call from “I am calling from the agriculture 


an unknown number. department. Your account details have not | 
been updated for the KISAN scheme, 
hence your subsidy funds around 12000 
Rupees are lying unused with us." 


“What should I do to 


"y n visit t t : t 
update the account?” ou can visit the website and update 


on your own, or else, I will update it if 
you provide me your details." 


Do's: 

Verify the details of any government scheme from your Gram Panchayat or 
Tehsildar of fice before making any payment for getting the subsidy. 
Report the incident to the nearest Cyber Crime Police Station and National 
Cyber Crime Reporting Portal at https://cybercrime.gov.in. 
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“Please update it “Kindly provide your bank account and 
from your side." debit card details." 


“You will 
receive an 
OTP; please 
fm share it to 
complete 


Raju provides the details of his bank account, debit card 
and shares the OTP to the fraudster 


A few minutes later, Raju received an SMS 
from the bank saying Rs 25,000/- 
was debited from his bank account. 


Raju was cheated under the pretext of 
registering for a social welfare scheme. 


Don'ts: 

Never believe in such stories of getting subsidies over calls. 

The eligible beneficiary data is already available with the State Government. 

The government will provide you with the benefits after you register yourself at Jan Seva 
Kendra of your Tehsildar office in your district or gram panchayat. 

Never share your OTP with anyone. 
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Raju's friend Krishna visited him to 
explain about a scheme with good “Hi Raju! I came across a 
earning potential. fantastic opportunity to make 
= — money with minimal 
time and investment." 


"Is it? Sounds exciting!!! "You must buy XYZ company 
Tell me more about it, I products for Rs 20,000, and you will get 
want to know everything." a mobile phone of Rs 10,000/- for free. 
After you enrol three more people, you 
will get a commission of Rs 3,000 
per person as you bring more and more 
people under the scheme." 


wf Stay away from people trying to get you into these kinds of schemes. 
ww Verify the authenticity of the Multi Level Marketing scheme. Some of the network marketing 
schemes, like Ponz) scheme, Pyramid scheme etc., are illegal in India under the Direct Selling 


Guidelines, 2016 and the Prize Chits and Money Circulation Schemes (Banning) Act, 1978. 
wv Politely say no, even if the proposer of such a scheme is your friend or relative. 
wf Report the incident to the nearest Cyber Crime Police Station and 


National Cyber Crime Reporting Portal at https://cybercrime.gov.in. 
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"This is a fantastic way to 
make money.I don't have to work 
every day as the agents recruited by 


“Yes, Raju. Therefore, I am visiting 
me will be working on my behalf, 


you, You may join my team as my agent.” 
and I will get commission 
on sales made by them." 


Raju immediately filled up the form and 
agreed to become a direct selling agent of 
the multi-level marketing company. 


However, sales were dismal and nonexistent 
He could not accomplish the targets set 
by the company of recruiting 3 more agents 

and he lost Rs 20000 as the products 
bought by him from the company also could 
not be sold. He did not get any mobile either 








f 


= 


= SD 


, gfe oboe 


A fraudster advertises jobs over the internet and 
social media with attractive pay for working from 
home. (Earn Rs 1000 per day working from home). 


"Sir, thank you for registering with our agency. 
We have gone through your CV, and you are selected 
for the work from home job, You need to provide your 

Aadhaar and PAN card details, You will also have to 
fill up some forms and sign some documents 
as per our company policy.” 


24. WORK FROM HOME SCAM 
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Raju is very excited after coming 
across the advertisement and 
clicks on the link to register for 
work from home. Raju receives 
a call from a stranger. 


“Thank you. I will fill all the 
forms and send you my address 
proof and PAN card details." 


Beware of short URLs, information requested on Google forms from unknown sources. 
Look for poor spelling, grammar in emails, SMS, and portals. 

Be cautious of the links/forms asking for personal information. 

Always check the header of emails for verifying the genuineness of the offer or entity. 
Report the incident to the nearest Cyber Crime Police Station and National 

Cyber Crime Reporting Portal at https://cybercrime.gov.in. 
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"You can start working from tomorrow. You need to 
upload your work on the www.workfromhome.com portal. 
Here is your User ID and password. You also have 
to provide a security deposit of Rs 10000." 


Raju makes the payment of Rs 10000 
as a security deposit to the fraudster. 
The job progresses smoothly for a week. 
Raju kept receiving requiar payments. 
He got 7000 Rs as remuneration. 


In the next week, the agency started identifying 
mistakes; they consolidated the errors and produced a 
bill of Rs 1 lakh as compensation to the agency as 


per the terms and conditions of the 
contract signed by Raju initially. 


He got calls from ‘lawyers’, ‘police’ 
threatening legal action 
Raju started receiving multiple harassment and and then, terrified with all this, 
recovery calls from different numbers ina single day. Raju paid Rs 1 lakh to the fraudster. 


Don'ts: 

Never send sensitive, personal, or proprietary information (Aadhaar or Pan card) 
via email to unknown people. 

Never sign any online agreement before consulting a lawyer. 

Never pay to get a job, genuine firms never ask for deposits 
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25. ONLINE SHOPPING FRAUD 


One day, Raju received a message from an unknown number advertising 
mobile phones at a very cheap price.Out of curiosity, Raju clicks on the link 
and was surprised to see smartphones at a 50% discount. 

Raju contacted the number mentioned on the website. 


“Hi. I visited your website ABC, | 
and I am looking for a new 
smartphone.” 


‘}clik the link 


htt: phomesabeoc 


“Sir, thank you for showing interest in our 
website. Our company gets the phone 
directly from the manufacturer, 
so you will get the best price 

on our website.” 


“Oh! Then I would like to 
purchase a V20 mobile phone." | “Sir, I would like you to look at 
this year's best-seller phone, 

i.e. S20 FE. Sir, this is the 
best smartphone in the market. 
If you place the order within one 
hour by making full payment, then 
you will receive another 50% 
amount as cashback after delivery 
of the mobile phone.” 


¥ Always shop from secured websites. It is recommended to make sure the 
websites show a tiny lock icon or https’, in the checkout browser, 
indicating transactions are secure. 

~ Report the incident to the nearest Cyber Crime Police Station & National 
Cyber Crime Reporting Portal at https://cybercrime.gov.in. 
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“Okay. What is the price of the phone??" “Sir, the current market price of the phone having 


the same features is more than one lakh, 
| but we are selling the same for just Rs 50,000/-. 
You will receive a cashback of Rs 25,000/-" 
CI 8 | 


“Okay. I will think about the “Sir, that offer is valid for the next 50 minutes, 
same and will let you know." and only a few phones are left in stock. 


You must place an order immediately and 
make payment to avail the offer." 


(Raju reasoned he cant afford a phone costing Rs 50000 
but he again thought that he will receive 50% cashback after de 


livery 
of the mobile phone, so this is an excellent deal for him.) 


. “That's a great decision, | Raju made the Eanes 
"Okay, I will immediately Sir. Lam sending you a and waited for the delivery 
make the payment.” link for payment. |of the product, But he 


Please make your payment never received any mobile | 
at the earliest." ! 


Don'ts: 
* Never do online shopping from unknown websites. 
X Never buy anything from online sellers that accept payment only by gift cards, money 


transfers, etc., as such payments are nearly impossible to trace and 
reverse. 


* Never pay in advance to unknown sites, as chances of getting a product are 
negligible after payment has been done. 
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26. FRAUD USING PUBLIC WI-FI 


It was a Sunday. Raju and his family were in the shopping mall. Raju bought some 
clothes and groceries and went to the reception to make the payment. 


“Your total bill is Rs 12000, Sir. 
How would you like to pay, card 


: “I will pay online.” 
or cash?’ poy 


RECEPTION 


DS. : "Sir, you can connect to the free 
Raju initiated the payment nga | 
Se Were Wi-Fi if your network is 

ut there was a network issue. not working." 


"Iam facing connectivity 
issues during the transaction. 
Can you help me with this?" 


Do's: 

wv One should always use a secured Wi-Fi network. 

y Report the incident to the nearest Cyber Crime Police Station and 
National Cyber Crime Reporting Portal at https://cybercrime.gov.in. 
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Raju connected to the free Wi-Fi 
and completed the transaction.” 


Thanks ypu For snapping Raju was happy. His day was spent well. 
| After some time, he started receiving 
SMS alerts from his bank. Rs 14000/- and 
Rs 10000/-were debited from your 
account. Raju was confused. 


The last transaction he made was Rs 12000/-at the mall, and these transactions 
were different. He told his son about the messages. 


“What was the last transaction, F “You used free Wi-Fi for the financial 
Dad, and where did you do that? 7 
a + transaction? That is not safe, Dad. Hack- 


ers use this Wi-Fi to get access to users 


eB data and use it for illegal purposes." 
Y i 
"I made the last transaction at the 
shopping mall; I paid the bill online. 
My network was not working so I 
connected to free Wi-Fi and made 


the payment." | 
—— — "When ouused the Till "Oh Godll I mad 
Really? I was not Wi-Fi retwork for the A Big milefake. 4 


aware of that, son."||}| financial transaction, 
= : some hacker got access to What can we 


your personal data and used ||, 
it for unauthorized Tw : : 
We must immediately 
transactions visit your bank and 
Theta atte roe | ask them to block 
f your account.” 
these messages." Liss By z : 


ky 
(Raju became a victim of 


hackers by using public 
Wi-Fi for financial transactions.) 


Donts: 
* Do not use public Wi-Fi, especially while doing financial transactions. It is easy to 


hack into a laptop or mobile device that is on a public Wi-Fi connection with no 
protection. Hackers can read your emails, steal passwords and other credentials. 





Office of RBI Ombudsman, Mumbai -I 
https://cms.rbi.org.in/ 


DIWALI BUMPER OFFER - gong This seems great! 
| can buy one watch 
BEIREE BRANDED and get 3 free! Anyways 
setthgy Aen eal oy I wanted to give gifts to 
SINGLE WATCH my cousins this Diwali holiday 
BOUGHT!! HURRY UP! 
LIMITED PERIOD OFFERI! 
Please call 
Ph: 9Oxxxxxxx99 


for more details! 


when I go home! I'd 
better call before the offer ends.” 


“Hi. I came across your 

Branded watch offer. "Sir! You are lucky. 

Where is your location? We are about to close the offer. 
I can come down to your You need not come here, 


store for the purchase." Sir. We will deliver you 
|__the product at your address." 





Do's: 

v In the case of branded products, verify the advertisements on official websites. 

v For non-branded product advertisements, make a payment only after a personal visit 
to the shop or on delivery. 

¥ Report the incident to the nearest Cyber Crime Police Station and National Cyber 
Crime Reporting Portal at https://cybercrime.gov.in. 





Office of RBI Ombudsman, Mumbai -Il 
https://cms.rbi.org.in/ 


“Sure, Sir. I have shared 
them already. 
“That's great! Please send I have also shared account 
me pictures of the watches." details 
? | for transferring the amount. 
| You must pay Rs 3000 
to confirm the order. 
Once payment is successful, 
we will deliver the watches 
within 3 days. Hurry up, Sir. 
The offer ends in 
another 30 minutes. 


Happy Diwali!" 


i, 
Fy : 
nf ie, es 
q Le 
yoy 


“Okay. I have shared 
my address. 

I'll send the money 
right away." 


"Oh no! Why haven't they delivered 
yet!l>? Their phones are switched 
off..How do I trace them now!!? I 

think IT have lost the money!" 





Don'ts: 


x Don't be misled by tall claims made in advertisements. Check and 
verify before committing your hard-earned money, 


* Do not pay any amount unless you receive the product. 





Office of RBI Ombudsman, Mumbai -I 
https://cms.rbi.org.in/ 





28. FAKE LOAN OFFER 


Raju is a humble farmer trying to make both ends meet. 
One day, he received a call from a stranger. 


“Hello, Mr Raju. We are calling | 
from xyzzy Pvt Ltd. ae _—— 
We have introduced a scheme “Oh! Okay. That would 
for farmers in your region. | be helpful. 
You have been found eligible What is the offer?" 
for availing a loan from our % 
company at a subsidized rate." 


“We offer special loans up 
to Rs 5 lakhs at an interest of 
just 3%! For availing this loan, 
you need to share your bank account 
and Aadhaar details for verification." 


Do's: 
wv Always check the details of the lender (like their physical address/of ficial 
website, etc.) before availing their loans. 
-y Report the incident to the nearest Cyber Crime Police Station and National 
Cyber Crime Reporting Portal at https://cybercrime.gov.in. 
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"Sir, this offer is valid 
only for today. 

You need to senda 
processing fee 

of Rs 5000 immediately 
to avail of this offer. 

I have shared the account 


details for transferring 
the fee." 


“Okay, Sir!! We will update 
you on the loan application 
within a week! Thank you." 


“Oh! Is that so? 

Then I'll send the 
processing fee now. 

I will also send the rest 
of the details to your 
number soon.” 


Raju makes the payment. However, even 
after weeks, he does not receive any 
response from the company, and the 

number from which he received the call 

no longer exists. 


x Never make any upfront payment for sanctioning your loan. Banks and 
Financial Institutions never ask for advance fee for loan approval. 


Charges, if any, will be deducted from your loan money and balance amount 
will be transferred to your account. 
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“As per bank's policy, I am 
calling you to activate your new credit card 
through call. You need to confirm the details of 
your card, following which you will receive an 
activation code. Upon entering the code, your 
card will be activated." 


“Hello, Mr Raju. I am calling 
from XYZ Bank.Congratulations on 
your new credit card, Sir!" 


“Yes, thanks; I received it." 


(Raju recently got delivered a XYZ bank 
credit card): 


Raju (believed the fraudster 
as he already had his “Your name is Raju Deshpande. 
credit card details): | Your address is Lower Parel, Mumbai?" 


“Okay, Please 
activate my card,“ 


Do's: 
# Call the bank to block the card/bank account/UPI services to prevent further monetary loss. 
~¥ Send an email /letter / visit your home branch to report the incidence. 
| yf Report the incident to the nearest Cyber Crime Police Station and National Cyber Crime 
Reporting Portal at https://cybercrime.gov.in. 
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"Your card number . “Thanks for the confirmation. 
starts with 45. Kindly | Kindly confirm the expiry date and card 
confirm the number." | verification value (CVV) 

written behind the card.” 


| "Sure, It’s 4500 1000 1000 1000." | 


“Yes, the expiry 
date is 01/25 and 111 
is the CVV number." 


d 


“Thanks for the confirmation. Your 
card is activated now, and you will 
receive an SMS regarding this within} | 
the next hour. Have a nice day!” 


“Thanks for the confirmation, Sir. Raju received an SMS from his bank, about 
You must have received an SMS for the debit of Rs 1.2 lakhs on his credit card. 
Fina! activation. Kindly confirm Here, Raju was defrauded under the 
pretext of credit card activation. 


Don'ts: 

Never share your Card details and OTP to anyone. 

Don't trust unknown callers for your credit card activation, Credit cards can 
be activated from your mobile banking application. 

Don't share your card details/OTP with anyone, banks never ask for OTP. 
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30. CREDIT CARD LIMIT UPGRADATION FRAUD 


Another day, Raju received a call from the bank. 


Hello, Mr Raju. 

IT am calling from XYZ Bank. m ) 
Congratulations, Sir. Oh, thanks. 

Your credit card is What will be the new limit?" 
eligible for a limit upgrade." — 


“The new limit will be 
increased to Rs 5 lakh 
from your current limit 
of Rs 1 lakh.” 


“Oh, that's great!" 


Do's: 

~ Immediately call the bank to block the card/account/UPI service to prevent further 
transactions. 

~ Send an email /letter / visit your home branch to report the incidence. 

~# Report the incident to the nearest Cyber Crime Police Station and National Cyber 
Crime Reporting Portal at https://cybercrime.gov.in. 
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"Sir, you'll need to confirm 
the free limit upgrade code 
which will be delivered to you. 
Shall I proceed?" 


"Yes, please." 


"Thanks for the 
confirmation. 
Your card limit is 
upgraded now, 
and you will 


“Your card number is || receive an 
4500 1000 1000 1000. | SMS regarding 
You must have received |] | | this within the 
an activation code in next 2 hours. 





SMS. Please share. Have a nice day!" 


Sometime later, Raju received an SMS from his bank about 


debit of Rs 70000 on his credit card. 
He was cheated by the fraudster. 


Donts: 


* Don't trust unknown callers for credit card activation / limit 
enhancements. 


X Don't share your card details/OTP with anyone. 
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31. SAFE GUARDING YOUR AADHAAR CARD 


One day, Raju went to his bank branch to get his Raju submits the required documents. 
Aadhaar card linked with his bank account. 


“Please submit the Aadhaar linking form 
and photocopy of your Aadhaar card. 
Also, show me your original Aadhaar card." 


“I want to link my Aadhaar 
card with my bank account." 


“Tell me the OTP you received on 
your registered mobile number." 


“I did not get | | “But I did not receive any OTP. 
any OTP." Can you please check the mobile 
ff number linked to my bank account?" 


“The OTP was sent to your | J 
registered mobile number." [74 “Let me check. The mobile number 
—— — linked to your account is 98***25621." 





Do's- 

Verify the mobile number linked with your bank account. 

Check your bank statements and passbook regularly to identify any suspicious activity. 
Report the incident to the nearest Cyber Crime Police Station and National Cyber 
Crime Reporting Portal at https://cybercrime.gov.in. 
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“But this is not 
my mobile number." 


“You visited the 
bank last week." 


“The form you submitted may 
have his mobile number, and your bank account 
is linked with that number. He can easily 
misuse your bank account. You should have 
checked that form before submitting.” 





"Last time when I visited the bank to submit 


my KYC form, a gentleman in the bank helped 
me fill the form and submitted it for me." 


"I had no idea about this. 
I made such a big mistake. 
What can I do now?" 


"Please submit a form for 
changing your registered mobile |, 
number" 
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32. ONLINE FRAUD USING CASHBACK OFFERS 


Raju is very active on the internet and always prefers 
online shopping as E-commerce websites provide 
attractive offers on their products. 


. eda “Oh really. 50% cashback iS 
poeeat Tam calling from huge. Thank you so much..." 
Sir, we are glad to inform 
you that we are providing 

you with a 50% cashback on your 
recent purchase from ABC.com." 


“Okay, so Tell 
me. When 
will the 

cashback be 
credited to 
my account?” 


“You are our valuable 


customer, Sir." 


“It won't take much time, Sir. 

You need to open the app, 

and there will be a pop-up message 
regarding the cashback." 


Dos- 
¥ Inform your home branch and block your account to prevent further 


financial loss. 
v Report the incident to the nearest Cyber Crime Police Station and National 


Cyber Crime Reporting Portal at https://cybercrime.gov.in. 
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‘T've opened my app now. | eee is yah aad Sir. 
, | e must take your 
It is showing a payment approval to credit cashback 
request of Rs 20,000/- : in your account. 
to abc.com” 


So please click on Pay." 


“Okay, now it is asking 
i “Please enter your PIN 
rer GEL EL, as it is just for 
verification purposes.” 


“Thank you, Sir. You will 


shortly receive credit 
in your account." 


(The moment Raju entered his UPI PIN, an amount 
of Rs 20,000/- was debited from his account. Raju 


tried calling the Fraudster but was unable to connect.) 
Don'ts- 


x Don't believe the caller blindly; one should verify the company's official website to 
check the authenticity of the offer. 


* Don't enter or share UPI PIN for receiving payments as it is required only for 
sending payments. 





Raju wanted to book a hall for his daughter's 
birthday party, so he searched on the internet 
for the available options and entered details 
for enquiry.After a few moments, Raju got a call. 


"I wanted to ask about the banquet 
hall at your hotel, Is it available on rent?" 


“We charge on an hourly basis. 
It is Rs 2500 per hour." 


“Is it available on xx-xx-xx date, 
from 8 p.m. to 10 p.m.?" 


Dos- 
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“Yes, rental options are | 
available for the banquet hall.” [7 


“What are the charges? 
I want to book it for 
my daughter's birthday.” 


"Yes Sir, it is available. As a pre-booking 
process, you will have to send me 
Rs 1000/- to generate a token number." 


~ Always verify the authenticity of a person/institution offering any deal or offer. 

wv OTP SMS will have other details like amount / merchant name / beneficiary name 
of intended transaction. Always read the OTP SMS alerts thoroughly before use. 

~ Report the incident to the nearest Cyber Crime Police Station and National Cyber 
Crime Reporting Portal at https://cybercrime.gov.in. 
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“There is a 20% discount if you pay “Tell me your 16-digit card number, 
CVV and expiry date on the card.” 


“The 16-digit number is 5869***"****" 456, 
CVV is 256 and expiry date is 11/24." 


“You will get an | “Your booking is confirmed, 
OTP: please share it." Sir. You will shortly receive an SMS." 
i - 


After some time, Raju received SMS alerts 
on his phone. 'Rs 50,000 was debited from 
your account.'Raju immediately called the 

person, but he did not answer, Raju realized 

“The OTP is 4256." the person was a fraudster, and he should 
not have shared any card details with him. 


Don'ts- 
x Don't share your Credit/Debit card details and OTP with 
anyone. 
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34. CHARITY FRAUDS 


Raju is a Government school teacher. 
He came across a news report that Actor Monu 
was gifting smartphones to government school students. 


Raju searched on the 
| | internet about the 
_———" == —— actor's charity 
ate MPSA Pere es | foundation 
smartphones to Government | number. 
school students 1] aS 
MONU | 


charity | 


Foundation | 


“Hi Sir. This is his 
office's number. 


“Hello, Sir. Is this actor | IT am his persia) 
: S 
Monu's charity foundation?? | iw may Ebel you?” 


Always cross-check charity organizations’ credentials on the Goverment website 
/database to see if they are genuine or fake. 

Always be vigilant because the fake website may look almost identical to a genuine 
charity site, changing only the details of where to send donations. 

Scammers often use high-pressure tactics, such as stressing the urgency and using 
highly emotive language. Always be cautious of anyone claiming that donations need 
to be immediate. 

Report the incident to the nearest Cyber Crime Police Station and National Cyber 
Crime Reporting Portal at https://cybercrime.gov.in 
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“Sir. I am Raju, calling from xxxx “Oh yes! Thank you so much 
government school. I saw the news for reaching out to us on 
of your charity to the students. Sir, behalf of poor children. 
we have 100 poor students in our | T assure you of help." 
school who cannot afford laptops / |_ \ ae \ ez 
smartphones. Can you please help us, , v 


“Okay. Please share your address, 
We will send you 100 smartphones. 

However, you will have to pay a 
token registration charge of 

Rs 50,000/- today itself for us 

to send the phones. 

The phones will be delivered ina 
week, and we will refund the 
registration fee after delivery.” 


“Okay, Sir. T'll send 
you the registration 
fee right away. Please | 
share your account 
details." 


Raju transferred the funds, but he later came to know that no 
such mobile phones were donated to government school students. 
Raju realised that he had been duped by fraudsters under the 

pretext of charity. 


X Don't call ona random number based ona google search 
without verification. 
-% Don't send money upfront without verifying the 
authenticity/genuineness of the claim. 
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Raju is a senior citizen, who had recently 
retired from his job and received a large sum 
of superannuation money, which he wanted to 

invest, One day Raju received a call from 

someone, pretending to be the employee/agent 
of a reputed bank, advertising a new scheme 
with a high interest rate. 


9900XX3639 


Sy 


"Hello! Are you sure I will get a 9% 


interest rate? Because no bank is 
giving more than 7.1% interest," 


—— 


Raju: “Okay, I will visit the 
bank and open a Fixed deposit." 
“Sir, our bank will send a — — 
representative to your home since 


fou are a senior citizen.” ee = 
ba . . Raju: "No, I can't hand over 


my money to an unknown person.” 


Check all documents before signing. 

Prefer visiting the bank branch or performing transactions over internet banking 
with the assistance of known person. 

Report the incident to the nearest Cyber Crime Police Station or National Cyber 
Crime Reporting Portal https://cybercrime.gov.in in case of cybercrimes. 





Office of RBI Ombudsman, Mumbai -I] 
https://cms.rbi.org.in/ 


"Sir, there is no need to hand over any money. 
You just need to give a crossed cheque.! will 
ensure that your money is not withdrawn by cash 


in the fixed deposit account." 


“Okay. Tell him to 
collect the cheque." 


The fraudster poses as a representative of 
Raju and uses the overdraft form signed by 
Raju, which has fraudster's account 
number for credit of the overdraft. 


Don'ts: 


The fraudster visits Raju's home to 
collect the cheque and takes signatures 
on different forms, which Raju 
does not check before signing. 


After a day, the fraudster visits the branch 
as a representative of Raju and deposits the 
cheque for creating a fixed deposit. However, 
he gave fake fixed deposit receipts to Raju 
and kept the original ones with himself. 


After a day, Raju got an SMS5 regarding 
an overdraft issued against the FD and upon 
visiting the branch, he was shocked to know 
that the FD receipt he had received was fake. 





x Do not hand over important documents/cheques to unknown person. 
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36. FRAUDS USING MALICIOUS APPLICATION 


One day, Raju received a message seeking his willingness 
to do freelance work. As Raju was unemployed, 
he immediately dialled the number mentioned in the SMS. 


"Hi. T received an SMS (This is very easy, even my 
regarding freelance work. kid can do it.) 
What is the work profile?" “Okay, I am interested." 


After downloading the application, Raju started working. 
The work seemed genuine; however, he did not know that the 
fraudster was observing all his activities on his laptop. 


Over time, the fraudster was able to get all the 
secure credentials from Raju's device 
through his application. Unaware of the malafide intention, 
Raju continues to use the application. The fraudster was also 
able to get the OTP sent on Raju's email since 
the fraudster got access to his email. 


Do's: 

yv Verify the authenticity of the offer on the official website of the concerned 
entity offering jobs. 

¥ Report the incident to the nearest Cyber Crime Police Station and National Cyber 
Crime Reporting Portal at https://cybercrime.gov.in." 
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After a few days, Raju received SMS alerts stating 

Rs 50,000 was debited from his account Raju had 

no clue how his account was compromised or money 
was debited. 


After investigation, it was found that his device 
contained a malicious application, observing all his 
activities and the passwords were being skimmed. 


Don'ts: 

X Do not download any application through links sent via SMS, email or 
instant messaging applications, especially from strangers, without 
verifying its authenticity. 
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37. ILLEGAL LOAN FINANCING APPS WITH EXORBITANT 
INTEREST RATES AND HARASSMENT TACTICS 


Raju and Ramu were best friends. One day, 
Raju met Ramu and told him about his financial problems. 


urgently: what 
should I do?” 


Ramu: "No need to panic, Raju: “Oh, that's great! Quick money 
|} my friend. Many mobile apps | without any documents! Not even the 
offer immediate loans without Ff | credit score is being checked, I will | 
any document or security.” | 7 i immediately take a loan of Rs 5000/- , 


! 


Raju downloads a mobile app without verifying whether the entity providing loan is 
registered one. He gets Rs. 5000/- in his Bank account within no time. 


w Be cautious while downloading any app and providing the app permission to access data from 
your mobile phone. 

~“ Always check the registration status of the company/NBFC whose application is being used 
to provide loan and terms and conditions before availing loan from that NBFC at 
https://www.rbi.org.in/Scripts/BS_NBFCList.aspx. 

“ Report the incident to the nearest Cyber Crime Police Station and National Cyber Crime 
Reporting Portal at https://cybercrime.gov.in.” 
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Within 7 days, Raju started receiving 
calls for repayment of Rs 7500/-., “I was under the impression that 
Raju still had not arranged money To repay the old L will repay my loan amount along with 
loan and gets shocked by the demand nominal interest charges, but this app is 
of Rs 7500/- as repayment for the Rs 5000/- loan, charging exorbitant interest and many 
Raju approached another friend, Laxman. other charges. What shall I do now?" 


Oh! Did you verify whether 
the entity is registered with RBI 
or have any other valid registration? ™ 
Else, they would not be covered under [ 
any rules, and you are bound to pay 
as per the agreement only. Always 
check whether the finance 
company (NBFC) is 
registered / licensed by RBI 


Don'ts: 


Be cautious and don't take loan if any mobile app is providing a quick loan 
without checking any document and credit score, and always check the 
interest rate charged. 
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One day, Raju went to a restaurant along with 
his friend for lunch. He called the waiter. 





“How can I 
“Welcome, Sir. help you, sir?" 


Please have a seat." 
“Could I see your 


menu card?” 


“Sure, sir. 
This is our menu card.” 


Do's: 

Always hide your pin number while transacting through 
debit/credit card. 

Change the PIN at periodic intervals. 

Always ask merchants/dealers to swipe the card in your presence. 
Report the incident to the nearest Cyber Crime Police 

Station and National Cyber Crime Reporting Portal at 
https://cybercrime.gov.in.” 
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“Sure, sir. We have a POS 
Machine, please give 


“Sir, the bill me your card.” 
amount is Rs 2000." 


“Can I pay by 
card?" — 


(Waiter took the card, walked away from Raju and 
swiped the card ina skimmer when Raju was not 


paying attention.) 


"Sir, please provide 
the PIN for the card." 


“my pins 
4586." _ 


| N 
Later, the skimmed details of the card were given to a fraudster 
who cloned the card with all the card details and used those 
details to siphon off money from Raju's account. 





Dont: 
X% Do not share your credit card/Debit card PIN with anyone. 


X Do not let credit and debit cards out of your sight. 
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39. FRAUD THROUGH DETAILS SHARED WITH 
KNOWN PERSON/FAMILY/RELATIVES 


Raju is a very friendly and helpful person, 


but he is ignorant when it comes to There is an exciting offer on xyz 


protecting his financial credentials or ae fein a bi Secu anes 
bank details. One day Raju received a cal Can you send me the details of your credit 


from his friend, Keshav. card over phone? I will pay you later." 


7 "Hello, Raju. 
Are you free to talk?" 


"Yes, Keshav: 
tell me." 


“Okay I will send the 
details of my card." 


Raju’s friends always use his cards to 
avail discounts offered by e-commerce 

Raju shared a photo of his websites, and he often sends his 

credit card with his friend. | | card details to his friends over the phone. 


Fr 


Do's: 
~ Report the incident to the nearest Cyber Crime Police Station and 
National Cyber Crime Reporting Portal at https://cybercrime.gov.in." 


~ Change the PIN at periodic intervals. 


| 
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Raju registered a complaint with 
After a month, Raju received an the bank. The bank further informed 
SMS on his mobile number and was him that the disputed transactions 
unable to figure out where the card was used. were done at an online merchant site. 


Keshav: “Raju, just a few days back, 
I lost my mobile phone, and my phone 
has your card details, I am afraid 
that could have led to these transactions." 


Raju realised that he himself had never done 
any payment at the online site, but he had 
shared his card details with his friends. 
Raju immediately contacted all his friends, 
but everyone informed him that 
they did not do the transaction. 


eae ae ae 
S ARO DENS 


"Oh! Keshav, you should have 
told me about this incident, I would 
have blocked the card. I should not have 
shared my card details over the phone.” | 


Don't: 


X Do not share your card details over social media or messaging apps 
even if the recipient is your friend / relatives / family. 
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Raju is a friendly retail shop owner. He was sitting at his 
shop when a customer came and purchased something. 


"Yes, here is the 
code.Please 


Can I make the scan and pay." 


payment via the XYZ 
application by scanning 
the QR code 
of your shop?" 


# Always check/confirm transactions by checking your bank account whenever 
a transaction is done through UPT. 

# Report the incident to the nearest Cyber Crime Police Station 
and National Cyber Crime Reporting Portal at https://cybercrime.gov.in." 
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The customer scanned the code under a fake XYZ app. 
He generated a fake payment intimation/screenshot 
and showed if to Raju. 

Fraudster: “The payment is done," 





At the end of the day, Raju cross-checked his 
shop account for reconciliation and found that 
one payment was not yet received in his 
account. Now he realized that he was 
duped by showing a fake screenshot. 


On this spoofing, Raju cannot even 
complain to the bank or give a fraud report, 
as the actual fund transfer never happened, and 
Raju does not have any details of the customer. 


Don't: 


* Don't conclude financial transaction without actual receipt of fund. 
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